Richie
438b4e09e6
- Introduced a new Rust-based service for ingesting HAProxy logs, including the necessary database schema and API endpoints. - Implemented database interactions for managing source status, inserting events, and handling ingestion batches. - Added validation for incoming log batches to ensure data integrity. - Configured systemd service for the HAProxy ingestion server with appropriate security settings. - Updated firewall rules to allow traffic on the ingestion server's port (8444). - Created necessary PostgreSQL database and user configurations for the ingestion service.
48 lines
956 B
Nix
48 lines
956 B
Nix
let
|
|
ports = {
|
|
audiobookshelf = 8000;
|
|
ebook_searcher = 8070;
|
|
gems = 8002;
|
|
gitea_http = 6443;
|
|
gitea_ssh = 2223;
|
|
grafana = 3000;
|
|
haproxy_ingest = 8444;
|
|
jellyfin_http = 8096;
|
|
jellyswarrm = 3100;
|
|
nix_binary_cache = 5000;
|
|
ollama = 11434;
|
|
open_webui = 8080;
|
|
postgresql = 5432;
|
|
share = 8091;
|
|
syncthing = 8384;
|
|
};
|
|
in
|
|
{
|
|
networking.firewall = {
|
|
enable = true;
|
|
interfaces.br-nix-builder = {
|
|
allowedTCPPorts = [ ];
|
|
allowedUDPPorts = [ ];
|
|
};
|
|
interfaces.tailscale0.allowedTCPPorts = [
|
|
ports.audiobookshelf
|
|
ports.gems
|
|
ports.haproxy_ingest
|
|
ports.jellyfin_http
|
|
ports.jellyswarrm
|
|
ports.nix_binary_cache
|
|
ports.share
|
|
];
|
|
allowedTCPPorts = [
|
|
ports.ebook_searcher
|
|
ports.gitea_http
|
|
ports.gitea_ssh
|
|
ports.grafana
|
|
ports.ollama
|
|
ports.open_webui
|
|
ports.postgresql
|
|
ports.syncthing
|
|
];
|
|
};
|
|
}
|